Skip to content

Commit cd3d1f1

Browse files
GitHub安全警告 Log4j 1.2中包含一个SocketServer类,该类很容易对不可信数据进行反序列化,当侦听日志数据的不可信网络流量时,与反序列化小工具结合使用时,可以利用该类远程执行任意代码。Log4j版本1.2到1.2.17将会受到影响。
1 parent bd82efc commit cd3d1f1

37 files changed

+17
-8
lines changed

.idea/workspace.xml

+15-6
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

pom.xml

+2-2
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@
1616
<version>8.0.18</version>
1717
</dependency>
1818
<!-- https://mvnrepository.com/artifact/log4j/log4j -->
19-
<dependency>
19+
<!--<dependency>
2020
<groupId>log4j</groupId>
2121
<artifactId>log4j</artifactId>
2222
<version>1.2.17</version>
23-
</dependency>
23+
</dependency>-->
2424
<!-- alibaba fastjson 1.2.47 -->
2525
<dependency>
2626
<groupId>com.alibaba</groupId>
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.

0 commit comments

Comments
 (0)